nuxt-security-module 4.3.1 → 4.3.3

package/dist/index.d.ts

@@ -1,7 +1,6 @@
 import { ModuleOptions } from "./models/ModuleOptions.js";
 import { SecurityRouteRules } from "./models/SecurityRouteRules.js";
 import { NuxtModule } from "@nuxt/schema";
-//#region src/module.d.ts
 declare module "@nuxt/schema" {
   interface NuxtConfig {
     security?: Partial<ModuleOptions>;
@@ -13,5 +12,4 @@ declare module "h3/rules" {
   }
 }
 declare const securityModule: NuxtModule<Partial<ModuleOptions>>;
-//#endregion
 export { type ModuleOptions, securityModule as default };

package/dist/index.js

@@ -12,7 +12,7 @@ import { getTypeTemplate } from "./services/getTypeTemplate.js";
 import { parseModuleOptions } from "./services/parseModuleOptions.js";
 import { defu } from "defu";
 import { addNitroPlugin, addServerHandler, addServerTemplate, addTypeTemplate, createResolver, defineNuxtModule } from "@nuxt/kit";
-//#region src/module.ts
+// src/module.ts
 const ROUTE_RULES_TEMPLATE_FILENAME = `#${MODULE_NAME}/route-rules.mjs`;
 const SRI_HASHES_TEMPLATE_FILENAME = `#${MODULE_NAME}/sri-hashes.mjs`;
 const ROUTE_RULES_PLUGIN_FILENAME = `#${MODULE_NAME}/route-rules-plugin.mjs`;
@@ -101,5 +101,4 @@ const securityModule = defineNuxtModule({
 		});
 	}
 });
-//#endregion
 export { securityModule as default };

package/dist/models/AllowedMethodsRestricterOptions.d.ts

@@ -1,5 +1,3 @@
-//#region src/models/AllowedMethodsRestricterOptions.d.ts
 export interface AllowedMethodsRestricterOptions {
   methods: string[];
-}
-//#endregion
+}

package/dist/models/BasicAuthOptions.d.ts

@@ -1,9 +1,7 @@
-//#region src/models/BasicAuthOptions.d.ts
 export interface BasicAuthOptions {
   exclude?: string[];
   include?: string[];
   message?: string;
   name: string;
   pass: string;
-}
-//#endregion
+}

package/dist/models/ContentSecurityPolicy.d.ts

@@ -1,3 +1 @@
-//#region src/models/ContentSecurityPolicy.d.ts
-export type ContentSecurityPolicy = Record<string, boolean | string[] | undefined>;
-//#endregion
+export type ContentSecurityPolicy = Record<string, boolean | string[] | undefined>;

package/dist/models/CorsHandlerOptions.d.ts

@@ -1,4 +1,3 @@
-//#region src/models/CorsHandlerOptions.d.ts
 export interface CorsHandlerOptions {
   allowHeaders?: string[];
   credentials?: boolean;
@@ -9,5 +8,4 @@ export interface CorsHandlerOptions {
   preflight?: {
     statusCode: number;
   };
-}
-//#endregion
+}

package/dist/models/CrossOriginEmbedderPolicy.d.ts

@@ -1,8 +1,6 @@
-//#region src/models/CrossOriginEmbedderPolicy.d.ts
 export declare const CrossOriginEmbedderPolicy: {
   readonly Credentialless: "credentialless";
   readonly RequireCorp: "require-corp";
   readonly UnsafeNone: "unsafe-none";
 };
-export type CrossOriginEmbedderPolicy = (typeof CrossOriginEmbedderPolicy)[keyof typeof CrossOriginEmbedderPolicy];
-//#endregion
+export type CrossOriginEmbedderPolicy = (typeof CrossOriginEmbedderPolicy)[keyof typeof CrossOriginEmbedderPolicy];

package/dist/models/CrossOriginEmbedderPolicy.js

@@ -1,8 +1,7 @@
-//#region src/models/CrossOriginEmbedderPolicy.ts
+// src/models/CrossOriginEmbedderPolicy.ts
 const CrossOriginEmbedderPolicy = {
 	Credentialless: "credentialless",
 	RequireCorp: "require-corp",
 	UnsafeNone: "unsafe-none"
 };
-//#endregion
 export { CrossOriginEmbedderPolicy };

package/dist/models/CsrfOptions.d.ts

@@ -1,6 +1,4 @@
-//#region src/models/CsrfOptions.d.ts
 export interface CsrfOptions {
   cookieName: string;
   headerName: string;
-}
-//#endregion
+}

package/dist/models/ModuleOptions.d.ts

@@ -6,7 +6,6 @@ import { RateLimiterOptions } from "./RateLimiterOptions.js";
 import { RequestSizeLimiterOptions } from "./RequestSizeLimiterOptions.js";
 import { SecurityHeaders } from "./SecurityHeaders.js";
 import { SsgOptions } from "./SsgOptions.js";
-//#region src/models/ModuleOptions.d.ts
 export interface ModuleOptions {
   allowedMethodsRestricter: AllowedMethodsRestricterOptions | false;
   basicAuth: BasicAuthOptions | false;
@@ -23,5 +22,4 @@ export interface ModuleOptions {
   sri: boolean;
   ssg: false | SsgOptions;
   strict: boolean;
-}
-//#endregion
+}

package/dist/models/PermissionsPolicy.d.ts

@@ -1,3 +1 @@
-//#region src/models/PermissionsPolicy.d.ts
-export type PermissionsPolicy = Record<string, false | string[] | undefined>;
-//#endregion
+export type PermissionsPolicy = Record<string, false | string[] | undefined>;

package/dist/models/RateLimitWindow.d.ts

@@ -1,6 +1,4 @@
-//#region src/models/RateLimitWindow.d.ts
 export interface RateLimitWindow {
   count: number;
   resetAt: number;
-}
-//#endregion
+}

package/dist/models/RateLimiterOptions.d.ts

@@ -1,6 +1,4 @@
-//#region src/models/RateLimiterOptions.d.ts
 export interface RateLimiterOptions {
   intervalInMilliseconds: number;
   tokensPerInterval: number;
-}
-//#endregion
+}

package/dist/models/RateLimiterStore.d.ts

@@ -1,6 +1,4 @@
 import { RateLimitWindow } from "./RateLimitWindow.js";
-//#region src/models/RateLimiterStore.d.ts
 export interface RateLimiterStore {
   increment: (key: string, intervalInMilliseconds: number) => Promise<RateLimitWindow>;
-}
-//#endregion
+}

package/dist/models/RequestSizeLimiterOptions.d.ts

@@ -1,6 +1,4 @@
-//#region src/models/RequestSizeLimiterOptions.d.ts
 export interface RequestSizeLimiterOptions {
   maxRequestSizeInBytes: number;
   maxUploadFileRequestInBytes: number;
-}
-//#endregion
+}

package/dist/models/SecurityHeaders.d.ts

@@ -3,7 +3,6 @@ import { CrossOriginEmbedderPolicy } from "./CrossOriginEmbedderPolicy.js";
 import { PermissionsPolicy } from "./PermissionsPolicy.js";
 import { StrictTransportSecurity } from "./StrictTransportSecurity.js";
 import { XFrameOptions } from "./XFrameOptions.js";
-//#region src/models/SecurityHeaders.d.ts
 export interface SecurityHeaders {
   contentSecurityPolicy?: ContentSecurityPolicy | false;
   crossOriginEmbedderPolicy?: CrossOriginEmbedderPolicy | false;
@@ -18,5 +17,4 @@ export interface SecurityHeaders {
   xDownloadOptions?: false | string;
   xFrameOptions?: false | XFrameOptions;
   xPermittedCrossDomainPolicies?: false | string;
-}
-//#endregion
+}

package/dist/models/SecurityRouteRules.d.ts

@@ -1,4 +1,2 @@
 import { ModuleOptions } from "./ModuleOptions.js";
-//#region src/models/SecurityRouteRules.d.ts
-export type SecurityRouteRules = Partial<ModuleOptions>;
-//#endregion
+export type SecurityRouteRules = Partial<ModuleOptions>;

package/dist/models/SecurityRules.d.ts

@@ -1,4 +1,2 @@
 import { ModuleOptions } from "./ModuleOptions.js";
-//#region src/models/SecurityRules.d.ts
-export type SecurityRules = Partial<ModuleOptions>;
-//#endregion
+export type SecurityRules = Partial<ModuleOptions>;

package/dist/models/SsgOptions.d.ts

@@ -1,9 +1,7 @@
-//#region src/models/SsgOptions.d.ts
 export interface SsgOptions {
   exportToPresets: boolean;
   hashScripts: boolean;
   hashStyles: boolean;
   meta: boolean;
   nitroHeaders: boolean;
-}
-//#endregion
+}

package/dist/models/StrictTransportSecurity.d.ts

@@ -1,7 +1,5 @@
-//#region src/models/StrictTransportSecurity.d.ts
 export interface StrictTransportSecurity {
   includeSubdomains: boolean;
   maxAge: number;
   preload: boolean;
-}
-//#endregion
+}

package/dist/models/XFrameOptions.d.ts

@@ -1,7 +1,5 @@
-//#region src/models/XFrameOptions.d.ts
 export declare const XFrameOptions: {
   readonly Deny: "DENY";
   readonly SameOrigin: "SAMEORIGIN";
 };
-export type XFrameOptions = (typeof XFrameOptions)[keyof typeof XFrameOptions];
-//#endregion
+export type XFrameOptions = (typeof XFrameOptions)[keyof typeof XFrameOptions];

package/dist/models/XFrameOptions.js

@@ -1,7 +1,6 @@
-//#region src/models/XFrameOptions.ts
+// src/models/XFrameOptions.ts
 const XFrameOptions = {
 	Deny: "DENY",
 	SameOrigin: "SAMEORIGIN"
 };
-//#endregion
 export { XFrameOptions };

package/dist/runtime/constants.d.ts

@@ -1,5 +1,4 @@
 import { SecurityHeaders } from "../models/SecurityHeaders.js";
-//#region src/runtime/constants.d.ts
 export declare const MODULE_NAME = "nuxt-security-module";
 export declare const ROUTE_RULES_HOOK: `${typeof MODULE_NAME}:routeRules`;
 export declare const SECURITY_HEADER_NAMES: Readonly<Record<keyof SecurityHeaders, string>>;
@@ -20,5 +19,4 @@ export declare const NONCE_TAG_NAMES: readonly string[];
 export declare const FILE_UPLOAD_CONTENT_TYPE = "multipart/form-data";
 export declare const SIZE_LIMITED_METHODS: readonly string[];
 export declare const DEFAULT_BASIC_AUTH_REALM = "Please enter username and password";
-export declare const BASIC_AUTHORIZATION_SCHEME = "Basic";
-//#endregion
+export declare const BASIC_AUTHORIZATION_SCHEME = "Basic";

package/dist/runtime/constants.js

@@ -1,4 +1,4 @@
-//#region src/runtime/constants.ts
+// src/runtime/constants.ts
 const MODULE_NAME = "nuxt-security-module";
 const ROUTE_RULES_HOOK = `${MODULE_NAME}:routeRules`;
 const SECURITY_HEADER_NAMES = {
@@ -48,5 +48,4 @@ const SIZE_LIMITED_METHODS = [
 ];
 const DEFAULT_BASIC_AUTH_REALM = "Please enter username and password";
 const BASIC_AUTHORIZATION_SCHEME = "Basic";
-//#endregion
 export { BASIC_AUTHORIZATION_SCHEME, CONTENT_SECURITY_POLICY_REPORT_ONLY_HEADER_NAME, CSP_HASH_ALGORITHM, CSRF_TOKEN_BYTE_LENGTH, CSRF_UNSAFE_METHODS, DEFAULT_BASIC_AUTH_REALM, FILE_UPLOAD_CONTENT_TYPE, HTML_ATTRIBUTE_REGEX, HTML_TAG_REGEX, MAX_RATE_LIMIT_ENTRIES, MODULE_NAME, NONCE_BYTE_LENGTH, NONCE_PLACEHOLDER, NONCE_TAG_NAMES, PRERENDERED_HEADERS_DIRECTORY_NAME, PRERENDERED_HEADERS_FILE_NAME, ROUTE_RULES_HOOK, SECURITY_HEADER_NAMES, SIZE_LIMITED_METHODS, SRI_HASH_ALGORITHM, UNKNOWN_CLIENT_KEY };

package/dist/runtime/nitro/plugins/hidePoweredBy.d.ts

@@ -1,5 +1,3 @@
 import { NitroAppPlugin } from "nitro/types";
-//#region src/runtime/nitro/plugins/hidePoweredBy.d.ts
 declare const hidePoweredBy: NitroAppPlugin;
-//#endregion
 export { hidePoweredBy as default };

package/dist/runtime/nitro/plugins/hidePoweredBy.js

@@ -1,7 +1,7 @@
 import { getSecurityRules } from "../../services/getSecurityRules.js";
 import { definePlugin } from "nitro";
 import { isEvent } from "nitro/h3";
-//#region src/runtime/nitro/plugins/hidePoweredBy.ts
+// src/runtime/nitro/plugins/hidePoweredBy.ts
 const hidePoweredBy = definePlugin((nitroApp) => {
 	nitroApp.hooks.hook("response", (_response, event) => {
 		if (!isEvent(event)) return;
@@ -9,5 +9,4 @@ const hidePoweredBy = definePlugin((nitroApp) => {
 		if (rules?.enabled && rules.hidePoweredBy) event.res.headers.delete("x-powered-by");
 	});
 });
-//#endregion
 export { hidePoweredBy as default };

package/dist/runtime/nitro/plugins/nonce.d.ts

@@ -1,5 +1,3 @@
 import { NitroAppPlugin } from "nitro/types";
-//#region src/runtime/nitro/plugins/nonce.d.ts
 declare const noncePlugin: NitroAppPlugin;
-//#endregion
 export { noncePlugin as default };

package/dist/runtime/nitro/plugins/nonce.js

@@ -3,7 +3,7 @@ import { getSecurityRules } from "../../services/getSecurityRules.js";
 import { getSecurityState } from "../../services/getSecurityState.js";
 import { injectNonce } from "../../services/injectNonce.js";
 import { definePlugin } from "nitro";
-//#region src/runtime/nitro/plugins/nonce.ts
+// src/runtime/nitro/plugins/nonce.ts
 const HTML_SECTIONS = [
 	"body",
 	"bodyAppend",
@@ -23,5 +23,4 @@ const noncePlugin = definePlugin((nitroApp) => {
 		for (const section of HTML_SECTIONS) html[section] = html[section].map((element) => injectNonce(element, nonce));
 	});
 });
-//#endregion
 export { noncePlugin as default };

package/dist/runtime/nitro/plugins/routeRules.d.ts

@@ -1,5 +1,3 @@
 import { SecurityRules } from "../../../models/SecurityRules.js";
 import { NitroAppPlugin } from "nitro/types";
-//#region src/runtime/nitro/plugins/routeRules.d.ts
-export declare const createRouteRulesPlugin: (routeRules: Record<string, SecurityRules>) => NitroAppPlugin;
-//#endregion
+export declare const createRouteRulesPlugin: (routeRules: Record<string, SecurityRules>) => NitroAppPlugin;

package/dist/runtime/nitro/plugins/routeRules.js

@@ -1,7 +1,7 @@
 import { ROUTE_RULES_HOOK } from "../../constants.js";
 import { setSecurityRouteMatcher } from "../../services/securityRouteMatcher.js";
 import { definePlugin } from "nitro";
-//#region src/runtime/nitro/plugins/routeRules.ts
+// src/runtime/nitro/plugins/routeRules.ts
 const createRouteRulesPlugin = (routeRules) => definePlugin((nitroApp) => {
 	let routesResolved;
 	nitroApp.hooks.hook("request", () => {
@@ -13,5 +13,4 @@ const createRouteRulesPlugin = (routeRules) => definePlugin((nitroApp) => {
 		return routesResolved;
 	});
 });
-//#endregion
 export { createRouteRulesPlugin };

package/dist/runtime/nitro/plugins/securityHeaders.d.ts

@@ -1,5 +1,3 @@
 import { NitroAppPlugin } from "nitro/types";
-//#region src/runtime/nitro/plugins/securityHeaders.d.ts
 declare const securityHeaders: NitroAppPlugin;
-//#endregion
 export { securityHeaders as default };

package/dist/runtime/nitro/plugins/securityHeaders.js

@@ -4,7 +4,7 @@ import { getSecurityState } from "../../services/getSecurityState.js";
 import { serializeSecurityHeaders } from "../../services/serializeSecurityHeaders.js";
 import { updateContentSecurityPolicy } from "../../services/updateContentSecurityPolicy.js";
 import { definePlugin } from "nitro";
-//#region src/runtime/nitro/plugins/securityHeaders.ts
+// src/runtime/nitro/plugins/securityHeaders.ts
 const CONTENT_SECURITY_POLICY_HEADER_NAME = SECURITY_HEADER_NAMES.contentSecurityPolicy;
 const securityHeaders = definePlugin((nitroApp) => {
 	nitroApp.hooks.hook("render:route", (_context, { event }) => {
@@ -21,5 +21,4 @@ const securityHeaders = definePlugin((nitroApp) => {
 		}
 	});
 });
-//#endregion
 export { securityHeaders as default };

package/dist/runtime/nitro/plugins/ssgHashes.d.ts

@@ -1,5 +1,3 @@
 import { NitroAppPlugin } from "nitro/types";
-//#region src/runtime/nitro/plugins/ssgHashes.d.ts
 declare const ssgHashes: NitroAppPlugin;
-//#endregion
 export { ssgHashes as default };

package/dist/runtime/nitro/plugins/ssgHashes.js

@@ -4,7 +4,7 @@ import { getSecurityState } from "../../services/getSecurityState.js";
 import { insertContentSecurityPolicyMeta } from "../../services/insertContentSecurityPolicyMeta.js";
 import { updateContentSecurityPolicy } from "../../services/updateContentSecurityPolicy.js";
 import { definePlugin } from "nitro";
-//#region src/runtime/nitro/plugins/ssgHashes.ts
+// src/runtime/nitro/plugins/ssgHashes.ts
 const HTML_SECTIONS = [
 	"head",
 	"bodyPrepend",
@@ -23,5 +23,4 @@ const ssgHashes = definePlugin((nitroApp) => {
 		html.head = [insertContentSecurityPolicyMeta(html.head.join(""), policy)];
 	});
 });
-//#endregion
 export { ssgHashes as default };

package/dist/runtime/nitro/plugins/subresourceIntegrity.d.ts

@@ -1,4 +1,2 @@
 import { NitroAppPlugin } from "nitro/types";
-//#region src/runtime/nitro/plugins/subresourceIntegrity.d.ts
-export declare const createSubresourceIntegrityPlugin: (sriHashes: Record<string, string>) => NitroAppPlugin;
-//#endregion
+export declare const createSubresourceIntegrityPlugin: (sriHashes: Record<string, string>) => NitroAppPlugin;

package/dist/runtime/nitro/plugins/subresourceIntegrity.js

@@ -1,7 +1,7 @@
 import { getSecurityRules } from "../../services/getSecurityRules.js";
 import { injectSubresourceIntegrity } from "../../services/injectSubresourceIntegrity.js";
 import { definePlugin } from "nitro";
-//#region src/runtime/nitro/plugins/subresourceIntegrity.ts
+// src/runtime/nitro/plugins/subresourceIntegrity.ts
 const HTML_SECTIONS = [
 	"body",
 	"bodyAppend",
@@ -15,5 +15,4 @@ const createSubresourceIntegrityPlugin = (sriHashes) => definePlugin((nitroApp)
 		for (const section of HTML_SECTIONS) html[section] = html[section].map((element) => injectSubresourceIntegrity(element, sriHashes));
 	});
 });
-//#endregion
 export { createSubresourceIntegrityPlugin };

package/dist/runtime/server/middleware/allowedMethodsRestricter.d.ts

@@ -1,5 +1,3 @@
 import { Middleware } from "nitro/h3";
-//#region src/runtime/server/middleware/allowedMethodsRestricter.d.ts
 declare const allowedMethodsRestricter: Middleware;
-//#endregion
 export { allowedMethodsRestricter as default };

package/dist/runtime/server/middleware/allowedMethodsRestricter.js

@@ -2,7 +2,7 @@ import { checkIsMethodAllowed } from "../../services/checkIsMethodAllowed.js";
 import { getSecurityRules } from "../../services/getSecurityRules.js";
 import { defineMiddleware } from "nitro";
 import { HTTPError } from "nitro/h3";
-//#region src/runtime/server/middleware/allowedMethodsRestricter.ts
+// src/runtime/server/middleware/allowedMethodsRestricter.ts
 const allowedMethodsRestricter = defineMiddleware((event) => {
 	const rules = getSecurityRules(event);
 	if (!rules?.enabled || !rules.allowedMethodsRestricter) return;
@@ -11,5 +11,4 @@ const allowedMethodsRestricter = defineMiddleware((event) => {
 		statusText: "Method not allowed"
 	});
 });
-//#endregion
 export { allowedMethodsRestricter as default };

package/dist/runtime/server/middleware/basicAuth.d.ts

@@ -1,5 +1,3 @@
 import { Middleware } from "nitro/h3";
-//#region src/runtime/server/middleware/basicAuth.d.ts
 declare const basicAuthMiddleware: Middleware;
-//#endregion
 export { basicAuthMiddleware as default };

package/dist/runtime/server/middleware/basicAuth.js

@@ -6,7 +6,7 @@ import { serializeBasicAuthChallenge } from "../../services/serializeBasicAuthCh
 import { defineMiddleware } from "nitro";
 import { HTTPError } from "nitro/h3";
 import { useRuntimeConfig } from "nuxt/server";
-//#region src/runtime/server/middleware/basicAuth.ts
+// src/runtime/server/middleware/basicAuth.ts
 const basicAuthMiddleware = defineMiddleware((event) => {
 	const basicAuth = getBasicAuthOptions(useRuntimeConfig().private);
 	if (!basicAuth) return;
@@ -19,5 +19,4 @@ const basicAuthMiddleware = defineMiddleware((event) => {
 		statusText: "Access denied"
 	});
 });
-//#endregion
 export { basicAuthMiddleware as default };

package/dist/runtime/server/middleware/corsHandler.d.ts

@@ -1,5 +1,3 @@
 import { Middleware } from "nitro/h3";
-//#region src/runtime/server/middleware/corsHandler.d.ts
 declare const corsHandler: Middleware;
-//#endregion
 export { corsHandler as default };

package/dist/runtime/server/middleware/corsHandler.js

@@ -1,7 +1,7 @@
 import { getSecurityRules } from "../../services/getSecurityRules.js";
 import { defineMiddleware } from "nitro";
 import { handleCors } from "nitro/h3";
-//#region src/runtime/server/middleware/corsHandler.ts
+// src/runtime/server/middleware/corsHandler.ts
 const corsHandler = defineMiddleware((event) => {
 	const rules = getSecurityRules(event);
 	if (!rules?.enabled || !rules.corsHandler) return;
@@ -16,5 +16,4 @@ const corsHandler = defineMiddleware((event) => {
 		preflight
 	});
 });
-//#endregion
 export { corsHandler as default };

package/dist/runtime/server/middleware/csrf.d.ts

@@ -1,5 +1,3 @@
 import { Middleware } from "nitro/h3";
-//#region src/runtime/server/middleware/csrf.d.ts
 declare const csrf: Middleware;
-//#endregion
 export { csrf as default };

package/dist/runtime/server/middleware/csrf.js

@@ -4,7 +4,7 @@ import { generateRandomToken } from "../../services/generateRandomToken.js";
 import { getSecurityRules } from "../../services/getSecurityRules.js";
 import { defineMiddleware } from "nitro";
 import { HTTPError, getCookie, setCookie } from "nitro/h3";
-//#region src/runtime/server/middleware/csrf.ts
+// src/runtime/server/middleware/csrf.ts
 const csrf = defineMiddleware((event) => {
 	const rules = getSecurityRules(event);
 	if (!rules?.enabled || !rules.csrf) return;
@@ -24,5 +24,4 @@ const csrf = defineMiddleware((event) => {
 		statusText: "Forbidden"
 	});
 });
-//#endregion
 export { csrf as default };

package/dist/runtime/server/middleware/rateLimiter.d.ts

@@ -1,5 +1,3 @@
 import { Middleware } from "nitro/h3";
-//#region src/runtime/server/middleware/rateLimiter.d.ts
 declare const rateLimiter: Middleware;
-//#endregion
 export { rateLimiter as default };

package/dist/runtime/server/middleware/rateLimiter.js

@@ -4,7 +4,7 @@ import { getRetryAfterSeconds } from "../../services/getRetryAfterSeconds.js";
 import { getSecurityRules } from "../../services/getSecurityRules.js";
 import { defineMiddleware } from "nitro";
 import { HTTPError, getRequestIP } from "nitro/h3";
-//#region src/runtime/server/middleware/rateLimiter.ts
+// src/runtime/server/middleware/rateLimiter.ts
 const rateLimiterStore = createInMemoryRateLimiterStore(MAX_RATE_LIMIT_ENTRIES);
 const rateLimiter = defineMiddleware(async (event) => {
 	const rules = getSecurityRules(event);
@@ -18,5 +18,4 @@ const rateLimiter = defineMiddleware(async (event) => {
 		statusText: "Too Many Requests"
 	});
 });
-//#endregion
 export { rateLimiter as default };

package/dist/runtime/server/middleware/requestSizeLimiter.d.ts

@@ -1,5 +1,3 @@
 import { Middleware } from "nitro/h3";
-//#region src/runtime/server/middleware/requestSizeLimiter.d.ts
 declare const requestSizeLimiter: Middleware;
-//#endregion
 export { requestSizeLimiter as default };

package/dist/runtime/server/middleware/requestSizeLimiter.js

@@ -2,7 +2,7 @@ import { checkIsRequestTooLarge } from "../../services/checkIsRequestTooLarge.js
 import { getSecurityRules } from "../../services/getSecurityRules.js";
 import { defineMiddleware } from "nitro";
 import { HTTPError } from "nitro/h3";
-//#region src/runtime/server/middleware/requestSizeLimiter.ts
+// src/runtime/server/middleware/requestSizeLimiter.ts
 const requestSizeLimiter = defineMiddleware((event) => {
 	const rules = getSecurityRules(event);
 	if (!rules?.enabled || !rules.requestSizeLimiter) return;
@@ -13,5 +13,4 @@ const requestSizeLimiter = defineMiddleware((event) => {
 		statusText: "Payload Too Large"
 	});
 });
-//#endregion
 export { requestSizeLimiter as default };

package/dist/runtime/services/checkIsBasicAuthorized.d.ts

@@ -1,4 +1,2 @@
 import { BasicAuthOptions } from "../../models/BasicAuthOptions.js";
-//#region src/runtime/services/checkIsBasicAuthorized.d.ts
-export declare const checkIsBasicAuthorized: (authorization: null | string, { name, pass }: BasicAuthOptions) => boolean;
-//#endregion
+export declare const checkIsBasicAuthorized: (authorization: null | string, { name, pass }: BasicAuthOptions) => boolean;

package/dist/runtime/services/checkIsBasicAuthorized.js

@@ -1,6 +1,6 @@
 import { checkIsEqualInConstantTime } from "./checkIsEqualInConstantTime.js";
 import { getBasicAuthCredentials } from "./getBasicAuthCredentials.js";
-//#region src/runtime/services/checkIsBasicAuthorized.ts
+// src/runtime/services/checkIsBasicAuthorized.ts
 const checkIsBasicAuthorized = (authorization, { name, pass }) => {
 	const credentials = getBasicAuthCredentials(authorization);
 	if (!credentials) return false;
@@ -8,5 +8,4 @@ const checkIsBasicAuthorized = (authorization, { name, pass }) => {
 	const isPassEqual = checkIsEqualInConstantTime(credentials.pass, pass);
 	return isNameEqual && isPassEqual;
 };
-//#endregion
 export { checkIsBasicAuthorized };

package/dist/runtime/services/checkIsChallenged.d.ts

@@ -1,4 +1,2 @@
 import { BasicAuthOptions } from "../../models/BasicAuthOptions.js";
-//#region src/runtime/services/checkIsChallenged.d.ts
-export declare const checkIsChallenged: (path: string, { exclude, include }: BasicAuthOptions) => boolean;
-//#endregion
+export declare const checkIsChallenged: (path: string, { exclude, include }: BasicAuthOptions) => boolean;

package/dist/runtime/services/checkIsChallenged.js

@@ -1,8 +1,7 @@
-//#region src/runtime/services/checkIsChallenged.ts
+// src/runtime/services/checkIsChallenged.ts
 const checkIsChallenged = (path, { exclude = [], include = [] }) => {
 	const isIncluded = include.some((prefix) => path.startsWith(prefix));
 	const isExcluded = exclude.some((prefix) => path.startsWith(prefix));
 	return isIncluded || !isExcluded;
 };
-//#endregion
 export { checkIsChallenged };

package/dist/runtime/services/checkIsCsrfTokenValid.d.ts

@@ -1,3 +1 @@
-//#region src/runtime/services/checkIsCsrfTokenValid.d.ts
-export declare const checkIsCsrfTokenValid: (cookieToken: string | undefined, headerToken: null | string) => boolean;
-//#endregion
+export declare const checkIsCsrfTokenValid: (cookieToken: string | undefined, headerToken: null | string) => boolean;

package/dist/runtime/services/checkIsCsrfTokenValid.js

@@ -1,8 +1,7 @@
 import { checkIsEqualInConstantTime } from "./checkIsEqualInConstantTime.js";
-//#region src/runtime/services/checkIsCsrfTokenValid.ts
+// src/runtime/services/checkIsCsrfTokenValid.ts
 const checkIsCsrfTokenValid = (cookieToken, headerToken) => {
 	if (!cookieToken || !headerToken) return false;
 	return checkIsEqualInConstantTime(cookieToken, headerToken);
 };
-//#endregion
 export { checkIsCsrfTokenValid };

package/dist/runtime/services/checkIsEqualInConstantTime.d.ts

@@ -1,3 +1 @@
-//#region src/runtime/services/checkIsEqualInConstantTime.d.ts
-export declare const checkIsEqualInConstantTime: (first: string, second: string) => boolean;
-//#endregion
+export declare const checkIsEqualInConstantTime: (first: string, second: string) => boolean;

package/dist/runtime/services/checkIsEqualInConstantTime.js

@@ -1,4 +1,4 @@
-//#region src/runtime/services/checkIsEqualInConstantTime.ts
+// src/runtime/services/checkIsEqualInConstantTime.ts
 const checkIsEqualInConstantTime = (first, second) => {
 	const firstBytes = new TextEncoder().encode(first);
 	const secondBytes = new TextEncoder().encode(second);
@@ -7,5 +7,4 @@ const checkIsEqualInConstantTime = (first, second) => {
 	for (const [index, byte] of firstBytes.entries()) difference |= byte ^ (secondBytes[index] ?? 0);
 	return difference === 0;
 };
-//#endregion
 export { checkIsEqualInConstantTime };

package/dist/runtime/services/checkIsMethodAllowed.d.ts

@@ -1,3 +1 @@
-//#region src/runtime/services/checkIsMethodAllowed.d.ts
-export declare const checkIsMethodAllowed: (method: string, methods: string[]) => boolean;
-//#endregion
+export declare const checkIsMethodAllowed: (method: string, methods: string[]) => boolean;

package/dist/runtime/services/checkIsMethodAllowed.js

@@ -1,4 +1,3 @@
-//#region src/runtime/services/checkIsMethodAllowed.ts
+// src/runtime/services/checkIsMethodAllowed.ts
 const checkIsMethodAllowed = (method, methods) => methods.includes(method);
-//#endregion
 export { checkIsMethodAllowed };